FortinetProfessional
FortiGate 7.6 Administrator (FCP)
FCP-FGT · 5 days
View course →
FortinetProfessionalOn requestUpdated: July 2026
FSA-ADM Training for Your Team — FortiSandbox Administrator
Signature-based defenses share one blind spot: the file nobody has seen before. Sandboxing closes it by detonating unknown files and judging behavior instead of reputation — but only if someone configures the submissions, the VM images and the verdict handling properly. The FortiSandbox Administrator course trains that someone: deployment and sizing, integration with FortiGate, FortiMail and FortiWeb, scan profiles that mirror your real desktop estate, and the report-reading skill that turns a “malicious” verdict into a confident response decision.
Teams usually arrive at this course one of two ways: proactively, while building out a Fortinet security fabric — or reactively, after an incident demonstrated exactly which file type walked past the existing controls. The course serves both, though the first group tends to enjoy it more.
We arrange delivery through authorized partners and vetted instructors — live online in your time zone, at your site, or as a private group, commonly bundled with FortiGate or FortiMail training in one plan.
Who this course is for
- Security engineers adding sandboxing to a Fortinet security fabric
- SOC analysts who receive FortiSandbox verdicts and need to interpret them confidently
- Email and web gateway administrators integrating detonation into their filtering path
- Teams replacing signature-only malware defense after an incident proved its limits
What your team will learn
Topic areas below are grouped in our own words. The full official agenda is available on request — it comes from the authorized partner as part of your quote.
- How dynamic analysis actually works — detonation, behavior scoring and where evasive malware cheats
- Deploying FortiSandbox: appliance, VM and sizing for your real file volume
- Wiring the fabric together: inline verdicts from FortiGate, FortiMail and FortiWeb
- Scan profiles and VM images that match the desktops your users actually run
- Reading analysis reports — turning a verdict into an incident-response decision
- Tuning the balance between catch rate, latency and user patience
Key facts
| Duration | On request |
|---|---|
| Level | Professional |
| Prerequisites | General malware and network security concepts; FortiGate administration basics are useful for the integration topics |
| Formats | Live online (VILT), On-site at your location, Private group, Seats in scheduled groups |
| Languages | English + local-language instructors on request |
Formats and how we organize it
- Live online (VILT)
- On-site at your location
- Private group
- Seats in scheduled groups
One request → three options
Fill in the form below — it takes a couple of minutes. Within 5 business days you compare 2–3 concrete offers — provider, instructor, dates, price below the public list. We contract and administer the delivery end to end. Details:how we work and vendor training.
FSA-ADM vs alternatives: which to choose
Factual criteria only — level, duration, audience and certification. The right choice depends on your team's starting point and stack.
FCP FortiGate 7.6 Administrator
The firewall course, and the usual prerequisite context: FortiGate is the most common submission source for FortiSandbox. Take FortiGate training first if the team is new to the stack; sandbox training assumes the enforcement side is understood.
FortiSIEM Analyst
The investigation course across all telemetry. FortiSandbox answers "is this file malicious"; FortiSIEM answers "what happened around it". SOC teams typically want the sandbox skills in engineering and the analyst skills on shift.
A custom intensive
Building a malware-analysis capability beyond the appliance — triage workflow, report interpretation, IOC handling? A custom 2–3 day program can wrap FortiSandbox administration in the incident-response process it feeds.
Need only part of FSA-ADM?
If your team needs a subset of this program — or a mix of topics from several courses — we build a custom 2–4 day intensive on our own materials, shaped by your infrastructure. One custom program typically replaces 2–3 catalog courses.
Explore custom coursesFSA-ADM: frequently asked questions
What does FortiSandbox add over the antivirus we already run?
Antivirus recognizes known malware by signature and heuristics; a sandbox detonates unknown files in an instrumented environment and judges them by behavior. The technologies are complementary — the sandbox exists precisely for the samples that are too new for signatures.
Does the course cover integration with FortiGate and FortiMail?
Yes — fabric integration is a central theme: configuring FortiGate, FortiMail and FortiWeb to submit files, choosing between hold-for-verdict and asynchronous modes, and understanding the latency each choice adds to mail flow and downloads.
Will our team learn to read the analysis reports?
That is one of the most valuable outcomes. The course walks through behavioral reports — process activity, network callouts, dropped files — so engineers can justify verdicts to incident responders instead of forwarding a score without context.
Appliance, VM or cloud — does the delivery form matter for training?
The administration concepts carry across form factors; deployment and sizing chapters differ in detail. Tell us which edition you run or plan, and the instructor weights deployment labs and examples accordingly in a private delivery.
How do we organize FSA-ADM training?
Fill in the request form on this page — team size, format, timing. Within 5 business days you receive 2–3 options from authorized partners with vetted instructors, dates and prices below public lists.
Request 2–3 FSA-ADM training options — quotes within 5 business days
No commitment — describe the task and we come back with concrete options, dates and prices.
Fortinet, FSA-ADM and course names are trademarks of their respective owners. Uptime Skills is an independent training operator and is not affiliated with or endorsed byFortinet. Official courses are delivered by authorized training partners.